AU-9 (2)     Protection Of Audit Information | Audit Backup On Separate Physical Systems / Components

The information system backs up audit records [Assignment: organization-defined frequency] onto a physically different system or system component than the system or component being audited.

                    
                

Applicable CNSSI 1253 Baselines

Confidentiality
  • L
  • M
  • H
Integrity
  • L
  • M
  • H
Availability
  • L
  • M
  • H

Supplemental Guidance

This control enhancement helps to ensure that a compromise of the information system being audited does not also result in a compromise of the audit records.


Related Controls